Security news.
November's Patch Tuesday wave is headlined by active exploitation, with CISA adding multiple flaws across Cisco BroadWorks and Barracuda devices to its Known Exploited Vulnerabilities catalog. Concurrently, N-able was forced to issue emergency hotfixes for actively targeted zero-days in its RMM platform, while Microsoft delivered an overwhelming security release patching over 1,200 vulnerabilities, including an exploited Outlook flaw. Emerging research and incident disclosures also highlight the rapid weaponization and exposure of AI infrastructure and developer secrets.
N-able Issues Hotfixes for Exploited N-central Zero-Days
N-able released emergency fixes for critical zero-day bugs in its N-central remote monitoring and management platform that forced it to take vulnerable hosted environments offline following wild exploitation.
Microsoft Patches Record 1,200+ Flaws, Including Exploited Outlook Zero-Day
Microsoft's massive security drop addresses over 1,200 CVEs across Windows, Exchange, and SharePoint, notably fixing an actively exploited Outlook bug that exposes NTLMv2 hashes.
CISA Adds Actively Exploited Cisco BroadWorks and Openwave Flaws to KEV
CISA warned that threat actors are exploiting an XXE flaw in Cisco BroadWorks (CVE-2026-20320) and a data leak defect in Openwave Messaging (CVE-2026-111793), ordering federal agencies to remediate.
Barracuda Security Gateway Flaws Exploited in the Wild
Attackers are actively targeting vulnerabilities in Barracuda Networks products, including an OS command injection flaw (CVE-2026-111560) that enables unauthorized root access.
Critical Xen Orchestra Auth Bypass Under Active Exploitation
French vendor Vates VMS warned that an unauthenticated attacker can exploit cookie parsing behavior (tracked as VSA-2026-062) to gain administrative access on Xen Orchestra installations.
Railway Breach Leaks AI Secrets, Incurring $740,000 in Fraudulent Charges
Cloud PaaS provider Railway disclosed that an infrastructure breach exposed customer API secrets across up to 100,000 workspaces, leading to extensive unauthorized AI compute consumption.
Git Patches Flaw Allowing Code Execution on Recursive Clones
The Git project published updates across supported branches to resolve CVE-2026-111760, an integer truncation bug in index handling that allows a malicious repository to execute arbitrary code during recursive clones.
Over 35,000 Grok-Built Apps Found Exposed Online
Researchers discovered tens of thousands of unsecured applications generated with xAI's Grok assistant accessible without authentication, with roughly 10% leaking sensitive enterprise data and credentials.